Re: [Freeipa-devel] More types of replicas in FreeIPA

2013-02-15 Thread Ondrej Hamada
Dne 13.2.2013 20:10, Simo Sorce napsal(a): On Wed, 2013-02-13 at 19:34 +0100, Ondrej Hamada wrote: Dne 13.2.2013 14:36, Simo Sorce napsal(a): On Tue, 2013-02-12 at 19:30 -0500, Dmitri Pal wrote: It looks like thinks are starting to boil down to building a Kerberos proxy. Is this something tha

Re: [Freeipa-devel] More types of replicas in FreeIPA

2013-02-14 Thread Petr Spacek
On 13.2.2013 20:10, Simo Sorce wrote: On Wed, 2013-02-13 at 19:34 +0100, Ondrej Hamada wrote: Dne 13.2.2013 14:36, Simo Sorce napsal(a): On Tue, 2013-02-12 at 19:30 -0500, Dmitri Pal wrote: It looks like thinks are starting to boil down to building a Kerberos proxy. Is this something that fit

Re: [Freeipa-devel] More types of replicas in FreeIPA

2013-02-13 Thread Simo Sorce
On Wed, 2013-02-13 at 19:34 +0100, Ondrej Hamada wrote: > Dne 13.2.2013 14:36, Simo Sorce napsal(a): > > On Tue, 2013-02-12 at 19:30 -0500, Dmitri Pal wrote: > > > >> It looks like thinks are starting to boil down to building a Kerberos > >> proxy. > >> Is this something that fits within your thes

Re: [Freeipa-devel] More types of replicas in FreeIPA

2013-02-13 Thread Ondrej Hamada
Dne 13.2.2013 14:36, Simo Sorce napsal(a): On Tue, 2013-02-12 at 19:30 -0500, Dmitri Pal wrote: It looks like thinks are starting to boil down to building a Kerberos proxy. Is this something that fits within your thesis agenda Ondra? I guess that's for Ondrej to say, if it is too much we can s

Re: [Freeipa-devel] More types of replicas in FreeIPA

2013-02-13 Thread Simo Sorce
On Tue, 2013-02-12 at 19:30 -0500, Dmitri Pal wrote: > It looks like thinks are starting to boil down to building a Kerberos proxy. > Is this something that fits within your thesis agenda Ondra? I guess that's for Ondrej to say, if it is too much we can simply start working on the LDAP/replicatio

Re: [Freeipa-devel] More types of replicas in FreeIPA

2013-02-12 Thread Dmitri Pal
On 02/12/2013 08:20 AM, Simo Sorce wrote: > On Mon, 2013-02-11 at 20:30 -0500, Dmitri Pal wrote: >> On 02/11/2013 03:21 PM, Simo Sorce wrote: >>> On Mon, 2013-02-11 at 21:03 +0100, Ondrej Hamada wrote: Dne 3.2.2013 02:51, Dmitri Pal napsal(a): > On 01/31/2013 06:09 PM, Ondrej Hamada wrote:

Re: [Freeipa-devel] More types of replicas in FreeIPA

2013-02-12 Thread Simo Sorce
On Mon, 2013-02-11 at 20:30 -0500, Dmitri Pal wrote: > On 02/11/2013 03:21 PM, Simo Sorce wrote: > > On Mon, 2013-02-11 at 21:03 +0100, Ondrej Hamada wrote: > >> Dne 3.2.2013 02:51, Dmitri Pal napsal(a): > >>> On 01/31/2013 06:09 PM, Ondrej Hamada wrote: > Hello, > I'm starting to work on

Re: [Freeipa-devel] More types of replicas in FreeIPA

2013-02-11 Thread Dmitri Pal
On 02/11/2013 03:21 PM, Simo Sorce wrote: > On Mon, 2013-02-11 at 21:03 +0100, Ondrej Hamada wrote: >> Dne 3.2.2013 02:51, Dmitri Pal napsal(a): >>> On 01/31/2013 06:09 PM, Ondrej Hamada wrote: Hello, I'm starting to work on my thesis about 'More types of replicas in FreeIPA' again.

Re: [Freeipa-devel] More types of replicas in FreeIPA

2013-02-11 Thread Simo Sorce
On Mon, 2013-02-11 at 21:03 +0100, Ondrej Hamada wrote: > Dne 3.2.2013 02:51, Dmitri Pal napsal(a): > > On 01/31/2013 06:09 PM, Ondrej Hamada wrote: > >> Hello, > >> I'm starting to work on my thesis about 'More types of replicas in > >> FreeIPA' again. One of the main problems is the way how shoul

Re: [Freeipa-devel] More types of replicas in FreeIPA

2013-02-11 Thread Ondrej Hamada
Dne 3.2.2013 02:51, Dmitri Pal napsal(a): On 01/31/2013 06:09 PM, Ondrej Hamada wrote: Hello, I'm starting to work on my thesis about 'More types of replicas in FreeIPA' again. One of the main problems is the way how should the read-only replicas deal with KDC because they're not supposed to pos

[Freeipa-devel] More types of replicas in FreeIPA

2013-01-31 Thread Ondrej Hamada
Hello, I'm starting to work on my thesis about 'More types of replicas in FreeIPA' again. One of the main problems is the way how should the read-only replicas deal with KDC because they're not supposed to posses the Kerberos (krb) master key. The task was to investigate how is this solved in